Article
ID: 17772
Date: 28 June 2006
Fact: Microsoft's script will create a report of users who do not have the "Send As" right effectively applied to their mailbox.
This tool was designed for use in conjunction with:
17540:
Users Paused After Applying Microsoft(MS) Exchange 2003 Message Store Hot-fix
Please also see the following related articles:
For full reference please view be aware of Microsoft KB Article 912918 that covers this script's usage. This article is a simplified version that only covers the relevant exporting.
To run and analyze the script please do the following:
1) Log onto a domain workstation or server as an Exchange Administrator account.
2) Download
a copy of the Microsoft Script to a temporary directory: *screenshot*
ftp://goodcust:g00d4Me!@ftp.good.com/sendasreport.vbs
3) Open a command prompt (Start > Run > type cmd and hit OK)
4) Navigate to the temp directory where the script was saved. Example: cd c:\temp (hit enter).
5) In the
command prompt type the following and hit enter:
c:\temp>CSCRIPT sendasreport.vbs [domain controller name] –Export
Example: c:\temp>CSCRIPT sendasreport.vbs YODA -Export
Note: For large environments this test may take a while to execute and the log output may grow rather large.
6) Locate and view the exported file "Send_As_Export_Hour_Minute_Second.txt". It's recommended to open it with Microsoft Excel and allow the Text Import Wizard to import the data with the "delimited" setting. The script can also be viewed in plain text.
7) Analyze the first two columns of the script with the following tips.
The script goes through all users to see which accounts have full access to their mailbox, if any do it then checks whether those accounts have the "Send As" right applied. The log contains a list of users in the first column and all users that have full access to their mailbox but no "Send As" right applied in the second column. It is normal to see users show up in this list, just ensure that the GoodAdmin Service Account does not show up in the second column for any user. If users show up in the list then either they don’t have "allow inheritable permissions" set, they belong to a protected group, or the Send As right was not set correctly.
a) If all users show up in the exported file with the GoodAdmin Service Account in the second column it means the "Send As" right is not applied at all.
b) If a few users are reported with the GoodAdmin Service Account in the second column, it means that those users most likely belong to a protected group with is protected from the "Send As" propagation. Please view: 17773: Users are still paused after applying the GoodAdmin service account "Send As" right for the Microsoft(MS) Exchange 2003 Message Store Hot-fix
c) If no users reported or the GoodAdmin Service Account doesn't show up anywhere in the second column, it means propagation of rights need more time to replicate, but the "Send As" right is applied. You may execute the Test Send utility every so often to check whether the right has been applied, and if the test passes you can either restart Good Server services or wait for the users to un-pause. Please view: 17771: How to run Good's Test Send utility to verify that a specified user has the "Send As" right applied for the GoodAdmin Service Account
#) Below is an example of the "Send As" right not being applied for any users for the GoodAdmin Service Account "goodadmin2":
Additional Information: Keywords: testsend, exchange, rights, security, settings, 17540